Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity Vulnerabilities

Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability (CVE-2026-20232)

– A vulnerability in the web-based management interface of Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.

Read More
NewsSecurity Vulnerabilities

Cisco Unified Intelligence Center SQL Injection Vulnerability (CVE-2026-20327)

– A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device.

Read More
NewsSecurity Vulnerabilities

BlackBerry QNX KEV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2026-40272)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of BlackBerry QNX.

Read More
NewsSecurity Vulnerabilities

Gen Digital CCleaner Link Following Local Privilege Escalation Vulnerability (CVE-2026-12410)

– This vulnerability allows local attackers to escalate privileges on affected installations of Gen Digital CCleaner.

Read More
NewsSecurity Vulnerabilities

SonicWall GMS Virtual Appliance interface Command Injection Local Privilege Escalation Vulnerability (CVE-2026-66148)

– This vulnerability allows local attackers to escalate privileges on affected installations of SonicWall GMS Virtual Appliance.

Read More
NewsSecurity Vulnerabilities

SonicWall Email Security snmp Command Injection Local Privilege Escalation Vulnerability (CVE-2026-66150)

– This vulnerability allows local attackers to escalate privileges on affected installations of SonicWall Email Security.

Read More
NewsSecurity Vulnerabilities

Samsung Galaxy S25 TIFF File Processing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2026-21045)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S25 devices.

Read More
NewsSecurity Vulnerabilities

Apache Tomcat allowed bypass of EncryptInterceptor (CVE-2026-29146)

– Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor.

Read More
NewsSecurity Vulnerabilities

WatchGuard FireWare OS cli Token Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2026-13053)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS.

Read More
NewsSecurity Vulnerabilities

Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability (CVE-2026-18267)

– This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices.

Read More